I'm trying to find how to get the REST API endpoints for saved searches, but I'm finding conflicting information.
Would this be the endpoint: https://{host}:{mPort}/services/saved/searches/{ss name}
Or would this be correct: https://{host}:{mPort}/servicesNS/{user}/{app}/saved/searches/{ss name}
Or would it be something else?
Hi
https://host:<mgmt_port>/services/saved/searches
is the correct endpoint.
You can find them all here http://docs.splunk.com/Documentation/Splunk/7.0.2/RESTREF/RESTsearch
Hi
https://host:<mgmt_port>/services/saved/searches
is the correct endpoint.
You can find them all here http://docs.splunk.com/Documentation/Splunk/7.0.2/RESTREF/RESTsearch